*SPILLAGE* Which of the following may be helpful to prevent spillage? – Be aware of classification markings and all handling caveats. *SPILLAGE* Which of the following may be helpful to prevent spillage? – Label all files, removable media, and subject headers with appropriate classification markings. * CLASSIFIED DATA* Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization? – Secret *CLASSIFIED DATA* What is a good practice to protect classified information? – Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. *INSIDER THREAT* Based on the description below how many potential insider threat indicators are present? A colleague often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? – 3 or more indicators *INSIDER THREAT* What threat do insiders with authorized access to information or information systems pose? – They may wittingly or unwittingly use their authorized access to perform actions that result in the loss or degradation of resources or capabilities. *INSIDER THREAT* Which of the following is NOT considered a potential insider threat indicator? – New interest in learning a foregin language. *SOCIAL NETWORKING* When may you be subject to criminal, disciplinary, and/or administrative action due to online misconduct? – If you participate in or condone it at any time. *SOCIAL NETWORKING* When is the safest time to post details of your vacation activities on your social networking profile? – After you have returned home following the vacation. *SOCIAL NETWORKING* Which of the following is a security best practice when using social networking sites? – Understanding and using the available privacy settings. *UNCONTROLLED CLASSIFIED INFORMATION* Which of the following is NOT an example of CUI? – Press release data *UNCONTROLLED CLASSIFIED INFORMATION* Which of the following is NOT a correct way to protect CUI? – Sensitive information may be stored on any password-protected system. Select the information on the data sheet that is personally identifiable information (PII) But not protected health information (PHI) – Jane Jones Social security number: 123-45-6789 Select the information on the data sheet that is protected health information (PHI) – Jane has been Dr...ect patient..ect. *PHYSICAL SECURITY* Within a secure area, you see an individual who you do not know and is not wearing a visible badge – Ask the individual to see an identification badge. *IDENTITY MANAGEMENT* What certificates does the Common Access Card (CAC) or Personal Identity Verification (PIV) card contain? – Identification, encryption, and digital signature *IDENTITY MANAGEMENT* Which of the following is an example of a strong password? – eA1xy2!P *SENSITIVE COMPARTMENTED INFORMATION* When faxing Sensitive Compartmented Information (SCI), what actions should you take? – Mark SCI documents appropriately and use an approved SCI fax machine. *SENSITIVE COMPARTMENTED INFORMATION*